Known vulnerabilities in Red Hat OpenShift Serverless - page 22

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50809 - Improper Authentication
CVE-2020-26160		 CWE-287 Medium
No
No
 1.13.0 18.02.2021 SB20200930109
SB2021021819
SB2022020604
and 4 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 1.12.0 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU48480 - Improper input validation
CVE-2020-28362		 CWE-20 Medium
No
No
 1.12.0 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU48479 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28367		 CWE-94 High
No
No
 1.12.0 17.11.2020 SB2020111715
SB2020111716
SB2020111227
and 17 more
#VU48478 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28366		 CWE-94 High
No
No
 1.12.0 17.11.2020 SB2020111715
SB2020111716
SB2020111226
and 17 more
#VU46295 - NULL Pointer Dereference
CVE-2020-24659		 CWE-476 Medium
No
No
 1.12.0 04.09.2020 SB2020090415
SB2020090416
SB2020090604
and 11 more
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 1.12.0 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU27033 - Out-of-bounds write
CVE-2020-1751		 CWE-787 High
No
No
 1.11.0, 1.12.0 20.04.2020 SB2020040708
SB2020061304
SB2020110915
and 14 more
#VU26628 - Use After Free
CVE-2020-1752		 CWE-416 High
No
No
 1.11.0, 1.12.0 07.04.2020 SB2020040708
SB2020040709
SB2020110915
and 18 more
#VU26388 - Stack-based buffer overflow
CVE-2020-10029		 CWE-121 High
No
No
 1.11.0, 1.12.0 25.03.2020 SB2020030423
SB2020032513
SB2020061304
and 26 more
#VU24721 - Cryptographic Issues
CVE-2019-13627		 CWE-310 Low
No
No
 1.10.2, 1.11.0, 1.12.0 29.01.2020 SB2019092519
SB2020011468
SB2019092430
and 10 more
#VU23508 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14889		 CWE-78 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 11.12.2019 SB2019121035
SB2019121107
SB2019121701
and 21 more
#VU23188 - Divide By Zero
CVE-2019-16168		 CWE-369 Low
Available
No
 1.10.2, 1.11.0, 1.12.0 02.12.2019 SB2019120212
SB2019100934
SB2019100935
and 25 more
#VU22931 - Out-of-bounds read
CVE-2019-19221		 CWE-125 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 22.11.2019 SB2019112216
SB2020030312
SB2020061710
and 13 more
#VU21440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16935		 CWE-79 Medium
No
No
 1.10.2, 1.11.0 30.09.2019 SB2019093008
SB2019111003
SB2019111004
and 24 more
#VU21091 - Out-of-bounds read
CVE-2019-15903		 CWE-125 Medium
Available
No
 1.10.2, 1.11.0, 1.12.0 12.09.2019 SB2019091209
SB2019091210
SB2019091701
and 61 more
#VU20961 - Improper Validation of Certificate with Host Mismatch
CVE-2019-13050		 CWE-297 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 10.09.2019 SB2019062907
SB2019091018
SB2019081531
and 12 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843		 CWE-611 Medium
Available
No
 1.10.2, 1.11.0, 1.12.0 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more
#VU18645 - Use After Free
CVE-2019-5018		 CWE-416 High
No
No
 1.10.2, 1.11.0, 1.12.0 31.05.2019 SB2019053101
SB2019081527
SB2019120212
and 9 more
#VU16937 - Cross-Site Request Forgery (CSRF)
CVE-2018-1000858		 CWE-352 Low
No
No
 1.10.2 10.01.2019 SB2019011303
SB2021052216
SB2022080325
and 3 more


Showing elements 421 - 440 out of 445